1233 matches found
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
apache_skywalking
Apache SkyWalking SkyWalking : ๋ง์ดํฌ๋ก์๋น์ค, ํด๋ผ์ฐ๋ ๋ค์ดํฐ๋ธ ๋ฐ ์ปจํ ์ด๋ ๊ธฐ๋ฐDocker, Kubernetes, Mesos ์ํคํ ์ฒ๋ฅผ ์ํด ํน๋ณํ ์ค๊ณ๋ APM์ ํ๋ฆฌ์ผ์ด์ ์ฑ๋ฅ ๋ชจ๋ํฐ๋ง ์์คํ ์ ๋๋ค. ๊ฐ์ SkyWalking ์ ํด๋ผ์ฐ๋ ๋ค์ดํฐ๋ธ ์ํคํ ์ฒ์ ๋ถ์ฐ ์์คํ ์ ์ํ ๋ชจ๋ํฐ๋ง, ํธ๋ ์ด์ฑ, ์ง๋จ ๊ธฐ๋ฅ์ ํฌํจํ๋ ์คํ ์์ค APM ์์คํ ์ ๋๋ค. ํต์ฌ ๊ธฐ๋ฅ์ ๋ค์๊ณผ ๊ฐ์ต๋๋ค. ์๋น์ค, ์๋น์ค ์ธ์คํด์ค, ์๋ํฌ์ธํธ ๋ฉํธ๋ฆญ ๋ถ์ ๊ทผ๋ณธ ์์ธ ๋ถ์. ๋ฐํ์์์ ์ฝ๋๋ฅผ ํ๋กํ์ผ๋งํฉ๋๋ค. ์๋น์ค ํ ํด๋ก์ง ...
apm
APM ๋ชจ๋๋ฅผ ์ํ ๋ ๋์ ๋ก์ปฌ ๋น๋ฐ๋ฒํธ ๊ด๋ฆฌ์. APM์ Go์ Rust๋ก ์์ฑ๋ ๋น ๋ฅด๊ณ ์ ๋ก-์ง์zero-knowledge CLI ๋น๋ฐ๋ฒํธ ๊ด๋ฆฌ์์ ๋๋ค. ๋จ์ผ ์ํธํ ๋ณผํธ์ 25๊ฐ ์ด์์ ๊ตฌ์กฐํ๋ ๋น๋ฐ ์ ํ์ ์ ์ฅํฉ๋๋ค โ ๋น๋ฐ๋ฒํธ์ TOTP ์ฝ๋๋ถํฐ SSH ํค, ์๋ฃ ๊ธฐ๋ก, ์ฌ์ง, ๋ฐ์ด๋๋ฆฌ ํ์ผ๊น์ง. ์ด ์ ์ฅ์์์๋ ๊ฐ์ธ์ฉ pm๊ณผ ์กฐ์ง ๊ณต์ ๋ณผํธ์ฉ pm-team ๋ ๊ฐ์ง ๋ฐ์ด๋๋ฆฌ๊ฐ ์ ๊ณต๋ฉ๋๋ค. APM์ ์ ํํด์ผ ํ๋ ์ด์ ๋น ๋ฅด๊ณ ๋ฐฐ์ฐ๊ธฐ ์ฌ์ โ ๋ช ๋ น์ด๋ ํ๋๊ทธ๋ฅผ ์ธ์ธ ํ์๊ฐ ์์ต๋๋ค. APM์ด ํ์ํ ๊ฒ์ ๋ฌผ์ด๋ด ๋๋ค. ...
Kibana 7.x / 8.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 Missing Authorization (ESA-2026-144)
The version of Kibana installed on the remote host is 7.14.0 through 7.17.29, or 8.x prior to 8.19.21, or 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-144 advisory. - Missing Authorization CWE-862 in Kibana can lead to...
CVE-2026-78594
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
EUVD-2026-70058
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
CVE-2026-78594
Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...
APM Server 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-152)
Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map...
CVE-2026-78608
Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...
CVE-2018-18964
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:12+00:00| seen| https://t.me/hackingAttack/29057 2026-09-01 20:02:15+00:00| seen| https://t.me/hackingAttack/27123 2026-09-01 20:02:17+00:00| seen| https://t.me/hackingAttack/27117 2026-09-01 20:02:17+00:00| seen|...
EUVD-2026-69569
Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...
CVE-2026-78608
CVE-2026-78608 is a Missing Authorization (CWE-862) vulnerability in Kibana , where an internal APM integration function lacked a proper authorization check. This allowed any authenticated Kibana user to read APM server credentials that should only be accessible to users with APM or Fleet adminis...
CVE-2026-78608 Missing Authorization in Kibana Leading to Information Disclosure
Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...
CVE-2026-78608 Missing Authorization in Kibana Leading to Information Disclosure
Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...
GO-2025-4252 vulnerabilities
Vulnerabilities for packages: beats-fips, apm-server-fips, elastic-agent, apm-server, cloudbeat, cloudbeat-fips...
GO-2023-2413 vulnerabilities
Vulnerabilities for packages: elastic-agent-fips, apm-server-fips, elastic-agent, apm-server, cloudbeat, cloudbeat-fips...